41cc633088fc6e394689a084876fb4bb8d6b2aa9603a9f848ae20f13494ae71e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0b1429649d5b48156916706fc6680cc_JaffaCakes118
Size

312KB
Sample

240907-ac8kvsvdqa
MD5

d0b1429649d5b48156916706fc6680cc
SHA1

b47fa4b71194a8732897e1a5e58c0fd92a8f7ab9
SHA256

41cc633088fc6e394689a084876fb4bb8d6b2aa9603a9f848ae20f13494ae71e
SHA512

c8705bffa9d03510582a5c1167af5028a081c05df9dd449e0166c6329fe2d74fc73a80cbabd13e5e61df84767fe5a6fa0cc4b47c2e9ff2ef02db471e6e6f0725
SSDEEP

6144:vDqOuxu39OtPZcoz2Yd2egFB7KAJPRGp9:vDcxu39YPZfk/7KJ

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  d0b1429649d5b48156916706fc6680cc_JaffaCakes118
- Size
  
  312KB
- MD5
  
  d0b1429649d5b48156916706fc6680cc
- SHA1
  
  b47fa4b71194a8732897e1a5e58c0fd92a8f7ab9
- SHA256
  
  41cc633088fc6e394689a084876fb4bb8d6b2aa9603a9f848ae20f13494ae71e
- SHA512
  
  c8705bffa9d03510582a5c1167af5028a081c05df9dd449e0166c6329fe2d74fc73a80cbabd13e5e61df84767fe5a6fa0cc4b47c2e9ff2ef02db471e6e6f0725
- SSDEEP
  
  6144:vDqOuxu39OtPZcoz2Yd2egFB7KAJPRGp9:vDcxu39YPZfk/7KJ
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence